Open Windows Security > disable "Tamper Protection" (Restart perhaps necessary?)
Open Group Policy Editor
Go to Computer Configuration > Windows Components > Microsoft Defender Antivirus > Enable "Turn off Microsoft Defender Antivirus"
Note: Windows has a bug, where it resets that on the next reboot. Do the steps again after the next reboot, and it'll be set forever.
Thats disabling WD and not Bypassing WD.
May 31, 2022 06:26 PM
(This post was last modified: May 31, 2022 06:27 PM by Milk.)
This is common sense, it’s just manually disabling wd on ur own pc and has nothing to do with rats/malware, who the fuck can’t figure that out?
(May 31, 2022 06:26 PM)Milk Wrote: This is common sense, it’s just manually disabling wd on ur own pc and has nothing to do with rats/malware, who the fuck can’t figure that out?
Well thats kinda disappointing i thought i found a good way, but i've used it successfully to run darkcomet and other malwares. I even got darkcomet to work on my pc after 6 hours of trying. Do u have any good spreading methods btw i sent it to my friends but nothing happened. kinda disappointed in darkcomet
Seems interesting will look it up!
well.....its not new.
But this can be useful, if you use that process in a batch file or something similar to that & execute it before executing your payload then it can be useful.....
Hope you are getting my point. English isn't my native language though...
Cheers,
Comrade
U can also manually delete all the windows defender files located in the system 32. Use a program to force kill defender first or run a live linux distro to temporarily delete those files.
(Jun 1, 2022 02:10 PM)FibonacciGeek Wrote: U can also manually delete all the windows defender files located in the system 32. Use a program to force kill defender first or run a live linux distro to temporarily delete those files.
Sounds interesting, Can you share a way to run a live linux distro to temporarily delete those files on a Windows OS?
LMAO this thread is funny
(Jun 1, 2022 04:03 PM)jmark7 Wrote: Sounds interesting, Can you share a way to run a live linux distro to temporarily delete those files on a Windows OS?
Ur overcomplicating it just use my method
Jul 1, 2022 03:41 PM
(This post was last modified: Jul 1, 2022 03:42 PM by SIM-5186353.)
Here we have a tutorial, how to turn off WD, it's a joke, don't take it the wrong way🙃👍✌.
Are....are you retarded?
I think you might be
(Jun 1, 2022 12:12 AM)realduxv555 Wrote: Well thats kinda disappointing i thought i found a good way, but i've used it successfully to run darkcomet and other malwares. I even got darkcomet to work on my pc after 6 hours of trying. Do u have any good spreading methods btw i sent it to my friends but nothing happened. kinda disappointed in darkcomet
Who TF still uses darkcomet? That's ancient rat, use AsyncRat or some shit instead
This won't work. You can't programmatically disable tamper protection because only the users System (the kernel) and Microsoft Defender, not Administrator and not a user account, can disable tamper protection.
broski ur just disabling it
|
